$ rpki-client -vvf rpki-rsync.idnic.net/repo/01368ae3-dd12-4aa3-8948-546de04c51e4/0/2E1A4BECA1A3FEAEF0C7924EEEB4503F885A877C.mft File: 2E1A4BECA1A3FEAEF0C7924EEEB4503F885A877C.mft (raw, json) Hash identifier: hfp1Ta61Pgq8YF/6xm37dqqcR3lqWt3Uh+po4Cgr3YM= Subject key identifier: 63:53:AC:C7:EC:78:CB:F4:7D:B5:F2:81:18:8B:25:23:08:08:76:3A Authority key identifier: 2E:1A:4B:EC:A1:A3:FE:AE:F0:C7:92:4E:EE:B4:50:3F:88:5A:87:7C Certificate issuer: /CN=2E1A4BECA1A3FEAEF0C7924EEEB4503F885A877C Certificate serial: 4B5AB0B3986A748CD4DF9A1CB8FCC287CE1326F8 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/2E1A4BECA1A3FEAEF0C7924EEEB4503F885A877C.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/01368ae3-dd12-4aa3-8948-546de04c51e4/0/2E1A4BECA1A3FEAEF0C7924EEEB4503F885A877C.mft Manifest number: 3E Signing time: Wed 17 Jun 2026 22:29:48 +0000 Manifest this update: Wed 17 Jun 2026 22:24:48 +0000 Manifest next update: Fri 19 Jun 2026 00:53:48 +0000 Files and hashes: 1: 2E1A4BECA1A3FEAEF0C7924EEEB4503F885A877C.crl (hash: bajJRW3Dbq00Q5NfJEGB61/nyp29f3KLxb2ipxwPgbo=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/01368ae3-dd12-4aa3-8948-546de04c51e4/0/2E1A4BECA1A3FEAEF0C7924EEEB4503F885A877C.crl rsync://rpki-rsync.idnic.net/repo/01368ae3-dd12-4aa3-8948-546de04c51e4/0/2E1A4BECA1A3FEAEF0C7924EEEB4503F885A877C.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/2E1A4BECA1A3FEAEF0C7924EEEB4503F885A877C.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 19 Jun 2026 00:53:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4b:5a:b0:b3:98:6a:74:8c:d4:df:9a:1c:b8:fc:c2:87:ce:13:26:f8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2E1A4BECA1A3FEAEF0C7924EEEB4503F885A877C Validity Not Before: Jun 17 22:24:48 2026 GMT Not After : Jun 19 00:53:48 2026 GMT Subject: CN=6353ACC7EC78CBF47DB5F281188B25230808763A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:f0:f4:d2:4f:bf:e7:35:0f:06:95:30:92:00: b2:a9:0b:d4:79:d9:93:90:10:c1:b2:d0:0d:a7:6a: 8d:6d:17:01:96:21:d2:ab:b5:d5:1a:76:af:de:4d: fd:af:91:4a:35:35:a0:57:f8:1a:67:35:61:07:98: fc:8c:e4:65:c6:37:57:8b:0c:61:88:ba:86:ae:dd: b4:6f:a6:a5:3a:87:dc:2c:90:aa:fb:75:21:33:17: 6f:58:17:f9:b3:40:73:e6:68:c0:ed:c0:63:2f:62: db:bd:3d:cb:2f:a9:8a:86:a9:88:ef:cf:ea:c2:6b: 2c:ee:c8:70:74:5a:0d:8a:32:80:4f:62:ae:83:d9: 90:2b:53:14:91:94:85:96:4c:20:b3:78:03:43:d8: 1a:c9:e0:e2:24:f0:d6:3a:82:52:70:60:75:5a:f3: 61:bd:ec:ac:a7:84:99:ec:0b:b0:85:9f:1a:04:e5: 09:43:d2:f1:f8:97:00:18:50:ce:17:c6:30:91:29: 4a:4a:8c:0c:ac:5b:32:eb:e3:e1:26:ee:96:42:13: e5:8a:6c:49:d1:16:b2:f7:3f:c7:1b:56:23:2f:6b: 47:e2:1d:fb:c3:d4:d4:ab:2d:54:84:04:45:1e:24: 12:00:c5:8d:eb:9c:a0:a7:d9:dc:ad:e9:4d:ec:6b: 9b:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:53:AC:C7:EC:78:CB:F4:7D:B5:F2:81:18:8B:25:23:08:08:76:3A X509v3 Authority Key Identifier: keyid:2E:1A:4B:EC:A1:A3:FE:AE:F0:C7:92:4E:EE:B4:50:3F:88:5A:87:7C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/01368ae3-dd12-4aa3-8948-546de04c51e4/0/2E1A4BECA1A3FEAEF0C7924EEEB4503F885A877C.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/2E1A4BECA1A3FEAEF0C7924EEEB4503F885A877C.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/01368ae3-dd12-4aa3-8948-546de04c51e4/0/2E1A4BECA1A3FEAEF0C7924EEEB4503F885A877C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption aa:cf:63:da:d0:fe:f6:cc:cb:d8:82:9b:73:49:d4:38:bc:a4: 25:d4:8a:d3:04:00:1a:e1:f3:90:e2:01:7a:0e:3e:28:3e:51: 4a:66:e0:a6:a6:78:13:19:4b:ec:d3:52:1f:f0:33:d2:be:c0: ba:7b:37:3e:de:b1:de:18:cb:37:2d:c9:4d:8e:8c:eb:17:45: 7f:24:a4:d5:42:66:71:80:6a:6b:4c:05:b0:d7:e0:4e:06:8d: e7:80:38:e2:4e:ab:b9:8f:97:c9:63:8f:c3:13:fe:3c:67:20: 78:2f:b1:9c:53:bc:e7:02:50:5f:5c:cd:ad:c7:a1:db:69:39: d3:ad:92:23:d9:83:f9:c3:ae:dd:56:5b:97:4a:0e:74:25:8e: b9:01:d0:2b:6d:ed:e1:14:f7:84:b8:c1:94:48:65:36:d3:4d: ca:a5:54:f8:d7:cd:ec:64:95:6a:e9:cf:68:43:6f:ac:1e:b4: 73:c3:75:7e:f8:e2:b0:6b:ac:1d:48:82:89:31:ca:7f:f3:3e: f7:d5:c9:39:23:25:a7:cc:79:82:8e:d0:9a:ca:69:9a:aa:6a: 37:cb:da:10:ef:31:87:a8:e1:2d:63:a2:ba:99:71:e4:86:88: 7e:2c:d1:97:03:ac:51:0b:30:c4:f5:20:1a:d4:39:bc:a4:5c: a3:1e:cd:f8 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUS1qws5hqdIzU35ocuPzCh84TJvgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkUxQTRCRUNBMUEzRkVBRUYwQzc5MjRFRUVCNDUwM0Y4 ODVBODc3QzAeFw0yNjA2MTcyMjI0NDhaFw0yNjA2MTkwMDUzNDhaMDMxMTAvBgNV BAMTKDYzNTNBQ0M3RUM3OENCRjQ3REI1RjI4MTE4OEIyNTIzMDgwODc2M0EwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDU8PTST7/nNQ8GlTCSALKpC9R5 2ZOQEMGy0A2nao1tFwGWIdKrtdUadq/eTf2vkUo1NaBX+BpnNWEHmPyM5GXGN1eL DGGIuoau3bRvpqU6h9wskKr7dSEzF29YF/mzQHPmaMDtwGMvYtu9PcsvqYqGqYjv z+rCayzuyHB0Wg2KMoBPYq6D2ZArUxSRlIWWTCCzeAND2BrJ4OIk8NY6glJwYHVa 82G97KynhJnsC7CFnxoE5QlD0vH4lwAYUM4XxjCRKUpKjAysWzLr4+Em7pZCE+WK bEnRFrL3P8cbViMva0fiHfvD1NSrLVSEBEUeJBIAxY3rnKCn2dyt6U3sa5tJAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUY1Osx+x4y/R9tfKBGIslIwgIdjowHwYDVR0j BBgwFoAULhpL7KGj/q7wx5JO7rRQP4hah3wwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MDEzNjhhZTMtZGQxMi00YWEzLTg5NDgtNTQ2ZGUwNGM1MWU0LzAvMkUxQTRCRUNB MUEzRkVBRUYwQzc5MjRFRUVCNDUwM0Y4ODVBODc3Qy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC8yRTFBNEJFQ0ExQTNGRUFFRjBDNzkyNEVFRUI0NTAzRjg4NUE4 NzdDLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMDEzNjhhZTMtZGQxMi00YWEzLTg5 NDgtNTQ2ZGUwNGM1MWU0LzAvMkUxQTRCRUNBMUEzRkVBRUYwQzc5MjRFRUVCNDUw M0Y4ODVBODc3Qy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKrPY9rQ/vbMy9iCm3NJ1Di8pCXUitMEABrh 85DiAXoOPig+UUpm4KameBMZS+zTUh/wM9K+wLp7Nz7esd4YyzctyU2OjOsXRX8k pNVCZnGAamtMBbDX4E4GjeeAOOJOq7mPl8ljj8MT/jxnIHgvsZxTvOcCUF9cza3H odtpOdOtkiPZg/nDrt1WW5dKDnQljrkB0Ctt7eEU94S4wZRIZTbTTcqlVPjXzexk lWrpz2hDb6wetHPDdX744rBrrB1Igokxyn/zPvfVyTkjJafMeYKO0JrKaZqqajfL 2hDvMYeo4S1jorqZceSGiH4s0ZcDrFELMMT1IBrUObykXKMezfg= -----END CERTIFICATE-----Generated at Thu Jun 18 17:13:54 2026 by rpki-client